Privacy

Last updated October 31, 2026

Giving Receipts is run by Northpine Labs LLC. The short version: your donor file never leaves your computer. This page says what is processed where.

Your gift file and the letters

• The file you choose (or the rows you paste) is read by the page in your browser. It is not uploaded to us or to anyone else.
• Matching columns, the checks, the letters, the PDFs, the ZIP and the email texts are all made in your browser.
• While you work, the file and your choices are kept in this browser tab's session storage, so a reload or the trip to Stripe Checkout and back does not lose your work. It is cleared when you close the tab or click "Start over".
• Your organization's details (name, address, EIN, who signs, logo and signature images) are saved in this browser's local storage so they are filled in next time. You can clear them in your browser settings.
• We never ask for donor Social Security numbers. A column that looks like them is ignored and never printed.

When you buy the season pass

• Payment happens on Stripe Checkout. Stripe receives your email address and payment details; we never see your card number.
• We send Stripe your organization's name (the pass is per organization), a rough donor-count range such as "26–100", and the anonymous analytics id of this browser, so the purchase can be counted once in our analytics. No donor names, amounts or addresses.
• Your browser keeps a signed reference to the purchase in a cookie (gr_pass) and an unlock code in local storage, so the pass works when you come back.

Analytics

We use PostHog to see how the site is used: page views, clicks and where on the page they happen (without the text on the page or anything you type), and events such as "letters built" with counts in ranges. PostHog keeps an anonymous id and the first page and referrer of your visit in a cookie and in local storage. Events never contain donor names, amounts, addresses, emails, file names or file contents. The Stripe purchase reference is removed from addresses before anything is recorded. Cloudflare Web Analytics may also count page views and page speed, without cookies. There is no advertising tracking.

Servers and logs

The site is served through Cloudflare from a server in the United States. Like any website, they log technical request data (IP address, browser, pages requested) to keep the site running and secure. Your file is not part of any request.

Contact

Questions or requests about your data: [email protected].